$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json) Hash identifier: VIthnOL49zFQaeBTT1ytDC+OX+t23EKsln48fAvUKhI= Subject key identifier: 22:DE:09:D5:FE:CC:48:86:C8:25:8E:09:93:C6:3C:04:EB:6E:74:30 Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft Manifest number: 0149 Signing time: Mon 21 Apr 2025 03:10:58 +0000 Manifest this update: Mon 21 Apr 2025 03:10:58 +0000 Manifest next update: Mon 28 Apr 2025 03:10:58 +0000 Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: CTjABFA0EsIRf+YND5Ot/xSGNgJxjR1NBy18rRuQcTs=) 2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: ABFFM1PxoSUJD+uYz/pY10lv6OnyO7PHPufaHPjtOBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 03:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Validity Not Before: Apr 21 03:10:58 2025 GMT Not After : Apr 28 03:10:58 2025 GMT Subject: CN=6805b742-1e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ed:59:fb:9a:ca:a7:c1:07:db:ba:ef:9d:f5: 2c:1b:61:f2:0b:fc:be:fa:ae:c4:27:ab:d0:cb:fc: b1:60:b8:f4:4e:73:b7:f0:2b:01:35:69:37:79:bb: 36:eb:ce:98:c6:44:b2:ce:ae:31:cb:75:29:be:b3: 72:7f:52:6b:25:1e:21:fa:52:2e:ec:85:35:d7:1f: a0:b4:57:aa:c4:94:16:55:0b:da:e6:39:c2:dc:40: 08:91:c2:85:ae:04:8e:d7:88:5f:13:27:db:40:81: 6f:51:8c:ec:e7:73:2c:de:be:57:2f:ee:f9:4a:1b: db:62:0d:7f:a8:9e:42:38:de:36:46:8b:0c:55:e2: 63:7d:c4:b1:31:d3:0d:71:0b:ee:bd:96:25:5f:15: 94:88:40:b6:26:92:ee:33:f1:e1:b2:a9:a8:63:26: b0:4b:e5:54:28:1e:2a:f1:ff:66:b6:66:e6:b3:bd: f4:b9:61:4d:c9:78:f7:85:4f:8e:0d:b0:1f:45:93: 39:59:1c:a5:65:4a:f6:2e:2e:8e:46:e7:4d:6b:df: c2:34:1a:9b:3d:db:f3:26:4e:29:e6:f5:86:7c:ad: 8f:43:c0:9d:6b:a0:bc:5d:93:0b:da:42:99:f3:d8: 2d:cf:c4:df:60:ff:d4:95:0d:e5:33:07:24:e8:22: 23:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DE:09:D5:FE:CC:48:86:C8:25:8E:09:93:C6:3C:04:EB:6E:74:30 X509v3 Authority Key Identifier: keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d5:c1:33:87:82:63:98:32:42:94:c9:09:1f:26:96:9f:a1: 9b:11:92:48:88:7c:43:7e:64:91:a0:82:e1:28:36:f1:ba:e3: 33:ca:fa:fa:38:a6:7a:2a:3e:e1:48:5d:5a:65:49:21:96:53: ac:1b:28:39:d3:14:16:87:51:5d:3a:4a:fa:6e:ee:25:cf:38: bf:6f:f7:ab:b0:3a:cf:51:6b:42:07:e7:07:bd:d2:e3:c2:b2: 3f:9b:b9:61:51:f5:de:df:37:c9:ac:ed:35:85:28:70:04:af: c7:1e:29:4b:eb:42:5f:e0:7b:dc:d1:77:40:9a:98:46:ca:4b: 15:15:f3:8d:25:ed:bd:ba:20:ac:06:7c:f9:a3:16:d2:c8:e3: 02:2d:23:8c:97:7e:64:aa:09:f3:14:99:f4:c5:9d:1a:bf:7c: 48:1b:35:90:37:e7:3d:b9:d0:89:bb:3d:2e:b0:78:d8:79:6b: 12:8f:58:be:f9:de:e6:90:0c:19:b6:fa:7d:e9:a4:64:e5:2e: 7a:2e:6d:00:a1:7b:14:a0:02:b7:a7:e0:22:68:2c:6a:d1:1e: b4:fa:eb:03:43:45:72:4e:fe:c2:d0:c1:60:34:81:3d:9c:63: 5c:7f:1b:07:a9:11:66:35:c8:84:24:5d:c0:21:bf:dc:a1:db: fa:5d:fa:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD MDVFRkM0RTEwHhcNMjUwNDIxMDMxMDU4WhcNMjUwNDI4MDMxMDU4WjAYMRYwFAYD VQQDEw02ODA1Yjc0Mi0xZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0u1Z+5rKp8EH27rvnfUsG2HyC/y++q7EJ6vQy/yxYLj0TnO38CsBNWk3ebs2 686YxkSyzq4xy3UpvrNyf1JrJR4h+lIu7IU11x+gtFeqxJQWVQva5jnC3EAIkcKF rgSO14hfEyfbQIFvUYzs53Ms3r5XL+75ShvbYg1/qJ5CON42RosMVeJjfcSxMdMN cQvuvZYlXxWUiEC2JpLuM/HhsqmoYyawS+VUKB4q8f9mtmbms730uWFNyXj3hU+O DbAfRZM5WRylZUr2Li6ORudNa9/CNBqbPdvzJk4p5vWGfK2PQ8Cda6C8XZML2kKZ 89gtz8TfYP/UlQ3lMwck6CIjzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLeCdX+ zEiGyCWOCZPGPATrbnQwMB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4 T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDczRi8xRDE3RURCNDJCOTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lk bVR6MjVNQnRZQjNBWHZ4T0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA81cEzh4JjmDJClMkJHyaWn6GbEZJIiHxDfmSRoILhKDbxuuMzyvr6 OKZ6Kj7hSF1aZUkhllOsGyg50xQWh1FdOkr6bu4lzzi/b/ersDrPUWtCB+cHvdLj wrI/m7lhUfXe3zfJrO01hShwBK/HHilL60Jf4Hvc0XdAmphGyksVFfONJe29uiCs Bnz5oxbSyOMCLSOMl35kqgnzFJn0xZ0av3xIGzWQN+c9udCJuz0usHjYeWsSj1i+ +d7mkAwZtvp96aRk5S56Lm0AoXsUoAK3p+AiaCxq0R60+usDQ0VyTv7C0MFgNIE9 nGNcfxsHqRFmNciEJF3AIb/codv6Xfrf -----END CERTIFICATE-----Generated at Tue Apr 22 04:01:00 2025 by rpki-client